This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer File: uqDyWO70sr9LuqhDDB5YyowYjqc.cer (raw, json) Hash identifier: XeWBMT0NCd6MeraIiCCU0OoI5eovZnC0qUepO4yFFhM= Subject key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6AD04E2FE1C11119A12DC05F77DD3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.226.30.0/23 IP: 2a01:48a0::/32 IP: 2a04:fa00::/29 IP: 2a05:1e40::/29 IP: 2a06:1300::/29 IP: 2a06:4380::/29 IP: 2a06:d640::/29 IP: 2a09:2980::/29 IP: 2a09:9440::/29 IP: 2a09:a200::/29 IP: 2a09:a500::/29 IP: 2a09:a800::/29 IP: 2a09:af80::/29 IP: 2a09:bc00::/29 IP: 2a09:c700::/29 IP: 2a09:cf00::/29 IP: 2a09:d700::/29 IP: 2a09:dd00::/29 IP: 2a09:e300::/29 IP: 2a09:e700::/29 IP: 2a09:ef00::/29 IP: 2a0a:b380::/29 IP: 2a0a:c0c0::/29 IP: 2a0b:9000::/29 IP: 2a0c:72c0::/29 IP: 2a0c:9480::/29 IP: 2a0d:3c40::/29 IP: 2a0d:95c0::/29 IP: 2a0d:afc0::/29 IP: 2a0d:c100::/29 IP: 2a0d:cdc0::/29 IP: 2a0d:f840::/29 IP: 2a0d:fcc0::/29 IP: 2a0e:3f40::/29 IP: 2a0e:5880::/29 IP: 2a0e:7f00::/29 IP: 2a0e:b200::/29 IP: 2a0e:c4c0::/29 IP: 2a0e:eec0::/29 IP: 2a0f:1800::/29 IP: 2a0f:3100::/29 IP: 2a0f:9c00::/29 IP: 2a0f:9d00::/29 IP: 2a11:f40::/29 IP: 2a11:1480::/29 IP: 2a11:1540::/29 IP: 2a11:1a80::/29 IP: 2a11:1f00::/29 IP: 2a11:2140::/29 IP: 2a11:3440::/29 IP: 2a11:3c40::/29 IP: 2a11:3fc0::/29 IP: 2a11:4040::/29 IP: 2a11:45c0::/29 IP: 2a11:4a80::/29 IP: 2a11:5180::/29 IP: 2a11:6300::/29 IP: 2a11:6540::/29 IP: 2a11:6580::/29 IP: 2a11:68c0::/29 IP: 2a11:6bc0::/29 IP: 2a11:6d00::/29 IP: 2a11:84c0::/29 IP: 2a11:8940::/29 IP: 2a11:9380::/29 IP: 2a11:9f40::/29 IP: 2a11:a180::/29 IP: 2a12:1c40::/29 IP: 2a12:2040::/29 IP: 2a12:2ec0::/29 IP: 2a12:2fc0::/29 IP: 2a12:3040::/29 IP: 2a12:38c0::/29 IP: 2a12:39c0::/29 IP: 2a12:3d40::/29 IP: 2a12:3dc0::/29 IP: 2a14:a400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ad:04:e2:fe:1c:11:11:9a:12:dc:05:f7:7d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:cb:ed:15:2c:da:99:cc:4f:8a:74:fa:a3: 13:0e:71:a7:8a:0c:03:8e:7f:7e:1c:ae:69:7f:75: 93:1d:ce:17:92:80:3d:27:42:28:b1:72:c8:81:75: 04:43:a8:e7:3c:f5:09:bb:59:83:35:2b:51:5a:eb: ca:f6:69:fa:7c:9a:ff:9d:24:06:92:b4:87:2f:6e: 2c:6a:86:66:85:7a:e5:1d:99:e2:15:dc:f6:03:84: a8:cb:71:56:97:6f:0c:66:19:71:0d:5a:4c:d4:cb: 41:24:49:75:1b:d7:1b:8a:1e:22:f8:18:3a:20:a2: ff:60:3f:24:64:36:55:45:25:c0:ae:16:bc:da:77: c8:d0:36:27:2d:f0:60:c7:1e:1c:5b:6e:db:41:fe: e8:22:c3:9f:e8:ec:04:ef:c2:b2:40:e9:9d:9b:37: 6c:13:9c:06:dd:ef:a1:19:de:f5:32:85:04:5d:1e: c8:87:ee:bb:e1:20:e8:6d:31:84:41:a8:26:9d:a4: a7:c8:ce:5b:55:33:fd:ce:cf:34:7d:b3:1f:1c:fb: eb:3d:dd:56:48:6f:90:cc:ef:8e:d8:fa:29:98:62: 17:7b:19:25:fe:f6:fe:6d:1e:d7:c1:2e:97:48:58: a1:77:53:6a:2f:a2:49:ef:50:bf:86:27:75:bb:ef: d3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.30.0/23 IPv6: 2a01:48a0::/32 2a04:fa00::/29 2a05:1e40::/29 2a06:1300::/29 2a06:4380::/29 2a06:d640::/29 2a09:2980::/29 2a09:9440::/29 2a09:a200::/29 2a09:a500::/29 2a09:a800::/29 2a09:af80::/29 2a09:bc00::/29 2a09:c700::/29 2a09:cf00::/29 2a09:d700::/29 2a09:dd00::/29 2a09:e300::/29 2a09:e700::/29 2a09:ef00::/29 2a0a:b380::/29 2a0a:c0c0::/29 2a0b:9000::/29 2a0c:72c0::/29 2a0c:9480::/29 2a0d:3c40::/29 2a0d:95c0::/29 2a0d:afc0::/29 2a0d:c100::/29 2a0d:cdc0::/29 2a0d:f840::/29 2a0d:fcc0::/29 2a0e:3f40::/29 2a0e:5880::/29 2a0e:7f00::/29 2a0e:b200::/29 2a0e:c4c0::/29 2a0e:eec0::/29 2a0f:1800::/29 2a0f:3100::/29 2a0f:9c00::/29 2a0f:9d00::/29 2a11:f40::/29 2a11:1480::/29 2a11:1540::/29 2a11:1a80::/29 2a11:1f00::/29 2a11:2140::/29 2a11:3440::/29 2a11:3c40::/29 2a11:3fc0::/29 2a11:4040::/29 2a11:45c0::/29 2a11:4a80::/29 2a11:5180::/29 2a11:6300::/29 2a11:6540::/29 2a11:6580::/29 2a11:68c0::/29 2a11:6bc0::/29 2a11:6d00::/29 2a11:84c0::/29 2a11:8940::/29 2a11:9380::/29 2a11:9f40::/29 2a11:a180::/29 2a12:1c40::/29 2a12:2040::/29 2a12:2ec0::/29 2a12:2fc0::/29 2a12:3040::/29 2a12:38c0::/29 2a12:39c0::/29 2a12:3d40::/29 2a12:3dc0::/29 2a14:a400::/29 Signature Algorithm: sha256WithRSAEncryption 24:6e:43:70:88:f9:a2:1b:e8:73:32:f1:0a:3f:f1:6f:1f:31: 95:95:16:aa:59:8f:91:cc:af:ab:77:48:44:74:68:16:8a:1d: d8:1e:59:00:de:42:cc:c7:af:25:90:8d:40:82:5c:3a:ed:85: 99:f4:6e:39:01:27:ad:ae:7c:d1:cc:84:10:8f:4d:c2:9d:e1: fe:0e:d0:ef:ce:ec:fc:83:94:4e:5d:f9:e2:17:46:f3:9a:1c: 09:f7:5c:a6:e3:c4:ef:21:10:9c:9d:f1:15:e5:4c:fb:4d:c5: 6f:63:8e:7a:0e:a5:de:ec:3a:ee:d7:98:75:ef:d0:0b:a6:79: f9:80:92:e2:bb:b9:d7:04:90:f5:af:c3:8a:bc:87:87:80:ca: 97:bd:bb:2d:74:23:54:fa:89:c0:22:88:ae:dc:4f:e8:78:60: d9:fa:ce:5f:e0:77:f3:27:f0:e5:9e:3b:cf:16:5a:99:6d:b5: fb:29:2f:c8:82:f3:dc:5c:16:6d:59:9f:e3:e0:f0:3b:b8:45: 94:e7:37:4a:77:ef:f5:60:3c:1c:ff:21:48:14:5f:f2:f4:c7: 30:11:7d:9a:27:df:96:d6:f6:0f:4e:05:5d:06:0a:52:06:9f: 69:3e:58:9d:9b:1f:e6:68:ed:80:e4:5e:f3:f4:ac:a1:10:a9: 1a:03:4c:8d -----BEGIN CERTIFICATE----- MIIHnjCCBoagAwIBAgISAZt3xq0E4v4cERGaEtwF933TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWEwZjI1OGVlZjRiMmJmNGJiYWE4NDMwYzFlNThjYThjMTg4ZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM3L7RUs2pnMT4p0+qMTDnGnigwD jn9+HK5pf3WTHc4XkoA9J0IosXLIgXUEQ6jnPPUJu1mDNStRWuvK9mn6fJr/nSQG krSHL24saoZmhXrlHZniFdz2A4Soy3FWl28MZhlxDVpM1MtBJEl1G9cbih4i+Bg6 IKL/YD8kZDZVRSXArha82nfI0DYnLfBgxx4cW27bQf7oIsOf6OwE78KyQOmdmzds E5wG3e+hGd71MoUEXR7Ih+674SDobTGEQagmnaSnyM5bVTP9zs80fbMfHPvrPd1W SG+QzO+O2PopmGIXexkl/vb+bR7XwS6XSFihd1NqL6JJ71C/hid1u+/TVwIDAQAB o4IEqjCCBKYwHQYDVR0OBBYEFLqg8lju9LK/S7qoQwweWMqMGI6nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzVlMGVl MS1jODMzLTQyNDEtOTYwYS1lNTc2OGQ2YjE4MmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvNWUwZWUx LWM4MzMtNDI0MS05NjBhLWU1NzY4ZDZiMTgyYy8xL3VxRHlXTzcwc3I5THVxaERE QjVZeW93WWpxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICQwYIKwYB BQUHAQcBAf8EggIyMIICLjAMBAIAATAGAwQBW+IeMIICHAQCAAIwggIUAwUAKgFI oAMFAyoE+gADBQMqBR5AAwUDKgYTAAMFAyoGQ4ADBQMqBtZAAwUDKgkpgAMFAyoJ lEADBQMqCaIAAwUDKgmlAAMFAyoJqAADBQMqCa+AAwUDKgm8AAMFAyoJxwADBQMq Cc8AAwUDKgnXAAMFAyoJ3QADBQMqCeMAAwUDKgnnAAMFAyoJ7wADBQMqCrOAAwUD KgrAwAMFAyoLkAADBQMqDHLAAwUDKgyUgAMFAyoNPEADBQMqDZXAAwUDKg2vwAMF AyoNwQADBQMqDc3AAwUDKg34QAMFAyoN/MADBQMqDj9AAwUDKg5YgAMFAyoOfwAD BQMqDrIAAwUDKg7EwAMFAyoO7sADBQMqDxgAAwUDKg8xAAMFAyoPnAADBQMqD50A AwUDKhEPQAMFAyoRFIADBQMqERVAAwUDKhEagAMFAyoRHwADBQMqESFAAwUDKhE0 QAMFAyoRPEADBQMqET/AAwUDKhFAQAMFAyoRRcADBQMqEUqAAwUDKhFRgAMFAyoR YwADBQMqEWVAAwUDKhFlgAMFAyoRaMADBQMqEWvAAwUDKhFtAAMFAyoRhMADBQMq EYlAAwUDKhGTgAMFAyoRn0ADBQMqEaGAAwUDKhIcQAMFAyoSIEADBQMqEi7AAwUD KhIvwAMFAyoSMEADBQMqEjjAAwUDKhI5wAMFAyoSPUADBQMqEj3AAwUDKhSkADAN BgkqhkiG9w0BAQsFAAOCAQEAJG5DcIj5ohvoczLxCj/xbx8xlZUWqlmPkcyvq3dI RHRoFood2B5ZAN5CzMevJZCNQIJcOu2FmfRuOQEnra580cyEEI9Nwp3h/g7Q787s /IOUTl354hdG85ocCfdcpuPE7yEQnJ3xFeVM+03Fb2OOeg6l3uw67teYde/QC6Z5 +YCS4ru51wSQ9a/DiryHh4DKl727LXQjVPqJwCKIrtxP6Hhg2frOX+B38yfw5Z47 zxZamW21+ykvyILz3FwWbVmf4+DwO7hFlOc3Snfv9WA8HP8hSBRf8vTHMBF9miff ltb2D04FXQYKUgafaT5YnZsf5mjtgORe8/SsoRCpGgNMjQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:53 2026 by rpki-client